remove users url from secret entity

users have recently been integrated into the secret entity itself
instead of a separate endpoint for users